show-sql writes to System.out, Hibernate’s bind logging prints every value in clear, an OpenTelemetry collector cannot erase what it receives, and a file appender quietly sets a one-year retention. The leaks no code review sees, and how to own the one switch you deliberately keep.
GDPR-compliant logging in Spring Boot, part 2: a build-time test that fails on personal data in log statements
A logging rule that lives in a wiki holds only where its author was looking. How we turned it into a JUnit test that scans every module’s sources, why it must prove it scanned something, and why we why we decided against runtime log masking.
GDPR-compliant logging in Spring Boot, part 1: what must never reach a log line
A record’s toString(), an exception message your global handler logs, an e-mail as the actor: the three leaks that put personal data into almost every Spring API’s logs, and what to write instead.

